CVE-2024-57378: High severity wazuh siem vulnerability
Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57378?
CVE-2024-57378 has been rated as a medium severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2024-57378?
To fix CVE-2024-57378, upgrade Wazuh SIEM to version 4.8.3 or later, which addresses this broken access control issue.
What impact does CVE-2024-57378 have on Wazuh SIEM?
CVE-2024-57378 allows unauthorized creation of internal users without roles, leading to possible unauthorized access to sensitive information.
Is CVE-2024-57378 exploitable remotely?
Yes, CVE-2024-57378 can potentially be exploited remotely if access to the Wazuh SIEM interface is available.
What versions of Wazuh SIEM are affected by CVE-2024-57378?
Wazuh SIEM version 4.8.2 is affected by CVE-2024-57378.